Hi I have been working, with others, on a set of blueprints (some already discussed on this list) that enhance the definition and use of domains to make Openstack more successful and acceptable to enterprise customers (both when being hosted by a openstack-based cloud provider as well as for private clouds). I would welcome comments/suggestions: Optional private name spaces for domains. The initial draft of this proposal has been discussed here before, but I have now added details of the proposed changes : https://blueprints.launchpad.net/keystone/+spec/domain-name-spaces Token scoping to a domain. More easily enabling the operation of domain-wide admin roles: https://blueprints.launchpad.net/keystone/+spec/domain-scoping Domain role assignment. Providing more flexibility in terms of what the current functionality means to assign a role to a user-domain pair: https://blueprints.launchpad.net/keystone/+spec/domain-role-assignment Henry -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20121121/e5f23e03/attachment.html>